Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hJhSITgoWE8atTH6R3naRY-2r0g.roa
File: hJhSITgoWE8atTH6R3naRY-2r0g.roa (raw, json)
Hash identifier: uKdG7Aj0hWPGwpZOMH3MA1u4w+GiSP/Txu/fc80M4Jo=
Subject key identifier: 84:98:52:21:38:28:58:4F:1A:B5:31:FA:47:79:DA:45:8F:B6:AF:48
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 086A96FD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hJhSITgoWE8atTH6R3naRY-2r0g.roa
Signing time: Mon 02 May 2022 07:18:13 +0000
ROA not before: Mon 02 May 2022 07:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207643
IP address blocks: 45.147.44.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141203197 (0x86a96fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 2 07:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=849852213828584f1ab531fa4779da458fb6af48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:50:8d:11:65:5c:12:e6:dd:9c:9e:e4:24:
58:a8:60:6d:0c:d1:3e:44:89:44:4b:8d:d3:4d:93:
9a:7c:ef:f9:e6:d2:79:70:5f:70:d4:f7:44:4c:84:
76:bc:58:f1:c5:ef:61:98:3e:24:06:1a:21:8f:22:
e8:3b:79:c0:33:c5:88:e4:ee:91:1f:35:01:07:06:
ab:a1:40:18:c8:96:b0:a8:b4:09:77:c2:5d:3e:4a:
da:11:71:3d:4a:1f:82:46:3b:96:1d:58:c6:67:b9:
99:95:ba:cc:6e:c1:9a:31:76:5f:c6:5d:54:a9:fb:
25:eb:c2:32:d1:7a:ff:b3:59:78:2a:92:73:16:f2:
aa:db:b6:f0:9b:8d:ac:72:a4:78:68:37:e3:bd:e9:
d4:a3:8a:a7:95:7a:b1:b3:6e:f5:45:3e:48:21:1b:
b6:56:53:9d:92:20:68:cd:3b:55:06:56:a3:ea:f0:
da:89:e6:ff:a5:62:73:9b:0a:89:b3:c5:a7:59:39:
ca:3e:b4:60:94:7e:d4:ff:3f:1f:f0:b8:f8:12:12:
ac:d4:7e:ea:33:5a:87:62:18:1b:0c:9a:92:7d:1f:
6b:02:c8:80:ee:c4:1a:20:6b:9b:38:77:6b:77:29:
7b:f1:0c:7c:8b:be:a0:4a:e7:c3:b7:aa:e1:f6:34:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:98:52:21:38:28:58:4F:1A:B5:31:FA:47:79:DA:45:8F:B6:AF:48
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hJhSITgoWE8atTH6R3naRY-2r0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.0.0/24
45.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2d:f7:dc:8e:9a:ce:e4:d7:6c:56:86:0c:6d:f9:bc:6e:2f:
f6:99:5b:dc:46:fd:86:cc:ee:f5:eb:52:23:5a:0e:72:f8:30:
c5:88:ed:25:30:7f:64:1c:1b:07:6f:37:65:28:ee:78:75:ff:
bd:8f:84:c7:94:c9:87:fb:85:71:4a:dd:59:df:f2:a8:ef:5a:
9b:ef:d8:ae:60:9b:73:4a:e7:a8:55:41:fb:31:9a:18:ef:fd:
1b:2d:04:04:81:73:14:80:2a:a8:14:f1:76:b1:00:24:9a:51:
c6:cf:ca:86:79:6f:71:1b:24:2c:42:e2:8f:0b:ea:e6:3d:1a:
be:b3:db:99:d3:ef:8f:af:de:95:c5:4c:41:87:fa:cd:4a:15:
b9:32:29:b9:40:e4:c7:3f:66:4d:8f:10:a1:80:ed:f8:bd:c9:
eb:d4:ae:8c:ba:16:5c:4f:3f:bb:69:fe:5f:ce:52:d7:31:46:
fe:a7:df:2b:48:07:ed:bd:9e:71:ce:3d:54:1e:f2:ed:81:58:
46:91:6c:16:8f:6d:6c:56:ed:4b:2f:7b:8b:74:89:6a:7d:64:
b2:60:9f:e8:49:d3:71:c7:62:24:fe:20:53:27:78:1a:f8:71:
50:8d:6a:f3:61:49:3e:0a:13:9e:27:7c:50:9d:94:f5:f0:42:
35:f0:62:43
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECGqW/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDUw
MjA3MTgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ5ODUyMjEzODI4
NTg0ZjFhYjUzMWZhNDc3OWRhNDU4ZmI2YWY0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUWUI0RZVwS5t2cnuQkWKhgbQzRPkSJREuN002Tmnzv+ebS
eXBfcNT3REyEdrxY8cXvYZg+JAYaIY8i6Dt5wDPFiOTukR81AQcGq6FAGMiWsKi0
CXfCXT5K2hFxPUofgkY7lh1Yxme5mZW6zG7BmjF2X8ZdVKn7JevCMtF6/7NZeCqS
cxbyqtu28JuNrHKkeGg3473p1KOKp5V6sbNu9UU+SCEbtlZTnZIgaM07VQZWo+rw
2onm/6Vic5sKibPFp1k5yj60YJR+1P8/H/C4+BISrNR+6jNah2IYGwyakn0fawLI
gO7EGiBrmzh3a3cpe/EMfIu+oErnw7eq4fY0n4sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSEmFIhOChYTxq1MfpHedpFj7avSDAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L2hKaFNJVGdvV0U4YXRUSDZSM25hUlktMnIwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC2DAAMEAC2TLDANBgkqhkiG9w0B
AQsFAAOCAQEAKi333I6azuTXbFaGDG35vG4v9plb3Eb9hszu9etSI1oOcvgwxYjt
JTB/ZBwbB283ZSjueHX/vY+Ex5TJh/uFcUrdWd/yqO9am+/YrmCbc0rnqFVB+zGa
GO/9Gy0EBIFzFIAqqBTxdrEAJJpRxs/KhnlvcRskLELijwvq5j0avrPbmdPvj6/e
lcVMQYf6zUoVuTIpuUDkxz9mTY8QoYDt+L3J69SujLoWXE8/u2n+X85S1zFG/qff
K0gH7b2ecc49VB7y7YFYRpFsFo9tbFbtSy97i3SJan1ksmCf6EnTccdiJP4gUyd4
GvhxUI1q82FJPgoTnid8UJ2U9fBCNfBiQw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:45 2025 by rpki-client